Challenge

This article describes the usage of a predefined VMware ESXi extension (VIB) for Veeams Backup from Storage Snapshot with Cisco HyperFlex IOvisor processing.

Cause

To achieve optimal balancing within the Cisco HyperFlex data network at Backup from Storage Snapshot processing, it is needed to change the ESXi host firewall.See more background information here.One of the Methods to change the ESXi host firewall is by a pre-defined VIB that can be found at the Veeam Community GitHUB site.To implement this, follow the below instructions.

Solution

Install the Firewall VIB on ESXi:

Repeat the following steps on all Cisco HyperFlex nodes in your cluster.

1. Enable ssh and log in to your ESXi host by using a tool like PuTTY

2. Copy the VIB file to the ESXi host's tmp folder using HTTP or a SCP client

3. Install the VIBCommand:

esxcli software vib install -v /tmp/VeeamCiscoHXFirewall.vib -f

4. Verify the VIB was installedCommand:

esxcli software vib list | grep 'Veeam'

5. Verify the new firewall rule is activeCommand:

esxcli network firewall ruleset list

Note: If the VIB installation fails, you might need to set the acceptance level to CommunitySupport and retry the installation.Command:

Note: Veeam recommends to set the all IPs of Veeam proxy servers in the firewall rule. Otherwise the firewall rule is enabled for all incoming connections. You can specify either the IP address or a subnet. Use one command per proxy.